WARNING, this is a powerfull tool you can gain root access on many systems.
Use it at your own risk.
It scans for vulnerabilities in different OS and daemons:

The BIND scan:

Gains root access on all nonpatched boxes running linux with the following bind 
versions:

ISC BIND 8.2
ISC BIND 8.2.1
ISC BIND 8.2.2
ISC BIND 8.2.2-P3
ISC BIND 8.2.2-P5
ISC BIND 8.2.2-P7

The LPD scan:

Gains root access on all nonpatched boxes running linux RedHat 7.0 with lpd from 
distribution.

The FTPD scan:

Gains root access on all nonpatched boxes running the following OS/ftp daemons:

Caldera eDesktop|eServer|OpenLinux 2.3 update [wu-ftpd-2.6.1-13OL.i386.rpm]
Debian potato [wu-ftpd_2.6.0-3.deb]
Debian potato [wu-ftpd_2.6.0-5.1.deb]
Debian potato [wu-ftpd_2.6.0-5.3.deb]
Debian sid [wu-ftpd_2.6.1-5_i386.deb]
Immunix 6.2 (Cartman) [wu-ftpd-2.6.0-3_StackGuard.rpm]
Immunix 7.0 (Stolichnaya) [wu-ftpd-2.6.1-6_imnx_2.rpm]
Mandrake 6.0|6.1|7.0|7.1 update [wu-ftpd-2.6.1-8.6mdk.i586.rpm]
Mandrake 7.2 update [wu-ftpd-2.6.1-8.3mdk.i586.rpm]
Mandrake 8.1 [wu-ftpd-2.6.1-11mdk.i586.rpm]
RedHat 5.0|5.1 update [wu-ftpd-2.4.2b18-2.1.i386.rpm]
RedHat 5.2 (Apollo) [wu-ftpd-2.4.2b18-2.i386.rpm]
RedHat 5.2 update [wu-ftpd-2.6.0-2.5.x.i386.rpm]
RedHat 6.? [wu-ftpd-2.6.0-1.i386.rpm]
RedHat 6.0|6.1|6.2 update [wu-ftpd-2.6.0-14.6x.i386.rpm]
RedHat 6.1 (Cartman) [wu-ftpd-2.5.0-9.rpm]
RedHat 6.2 (Zoot) [wu-ftpd-2.6.0-3.i386.rpm]
RedHat 7.0 (Guinness) [wu-ftpd-2.6.1-6.i386.rpm]
RedHat 7.1 (Seawolf) [wu-ftpd-2.6.1-16.rpm]
RedHat 7.2 (Enigma) [wu-ftpd-2.6.1-18.i386.rpm]
SuSE 6.0|6.1 update [wuftpd-2.6.0-151.i386.rpm]
SuSE 6.0|6.1 update wu-2.4.2 [wuftpd-2.6.0-151.i386.rpm]
SuSE 6.2 update [wu-ftpd-2.6.0-1.i386.rpm]
SuSE 6.2 update [wuftpd-2.6.0-121.i386.rpm]
SuSE 6.2 update wu-2.4.2 [wuftpd-2.6.0-121.i386.rpm]
SuSE 7.0 [wuftpd.rpm]
SuSE 7.0 wu-2.4.2 [wuftpd.rpm]
SuSE 7.1 [wuftpd.rpm]
SuSE 7.1 wu-2.4.2 [wuftpd.rpm]
SuSE 7.2 [wuftpd.rpm]
SuSE 7.2 wu-2.4.2 [wuftpd.rpm]
SuSE 7.3 [wuftpd.rpm]
SuSE 7.3 wu-2.4.2 [wuftpd.rpm]
Slackware 7.1

The SSHD scan:

Gains root access on all nonpatched boxes running the followin versions:

Linux:

SSH-1.5-1.2.25
SSH-1.5-1.2.26
SSH-1.5-1.2.27
SSH-1.5-1.2.30
SSH-1.5-1.2.31
SSH-1.99-OpenSSH_2.2.0p1
SSH-1.5-OpenSSH-1.2
SSH-1.5-OpenSSH-1.2.2
SSH-1.5-OpenSSH-1.2.3

OpenBSD 3.x:

OpenSSH 2.9.9 - 33

The RPC scan:

Gains root access on multiple RPC vulnerabilities involving Linus/SunOS/Solaris.

The TELNED scan:

Gains root access on all nonpatched boxes running the following OS's:

Most of the BSD OS's

The POP3 scan:

Gains root access on all nonpatched boxes running QPOP 3.0b


For further upgrades send me new exploits at k1net1c@k1net1c.net

The SSL scan:

Gains access on almost all linux boxes running OpenSSL 0.9.6d and older.
Spawns a shell uid=apache.
